General

  • Target

    a3c88124d55bb0128332810b54abd517_JaffaCakes118

  • Size

    157KB

  • Sample

    240613-erh1zatepb

  • MD5

    a3c88124d55bb0128332810b54abd517

  • SHA1

    e38e85d364610812814f08f139b7247a18636430

  • SHA256

    be871476332594ee5d0f9e412085791be4af68310b91f2600720f0563fd60ff4

  • SHA512

    f6964c014920d931653d25eb46013bd33fc8fd05c8474ca8b0eee6d9d125fb3f413d183dd4331d6c11fffcf957a8ee5f021b66fcb5639ff7ca9d8fbc77e6c077

  • SSDEEP

    1536:ieoBtCI7RTGuHlPYTE+Ho/XqYBobXPWCegvr4+I6Y+0A9rD7HwtXI+7cJrMEVqyp:ijw2tXf9yfkMY+BES09JXAnyrZalI+YQ

Malware Config

Targets

    • Target

      a3c88124d55bb0128332810b54abd517_JaffaCakes118

    • Size

      157KB

    • MD5

      a3c88124d55bb0128332810b54abd517

    • SHA1

      e38e85d364610812814f08f139b7247a18636430

    • SHA256

      be871476332594ee5d0f9e412085791be4af68310b91f2600720f0563fd60ff4

    • SHA512

      f6964c014920d931653d25eb46013bd33fc8fd05c8474ca8b0eee6d9d125fb3f413d183dd4331d6c11fffcf957a8ee5f021b66fcb5639ff7ca9d8fbc77e6c077

    • SSDEEP

      1536:ieoBtCI7RTGuHlPYTE+Ho/XqYBobXPWCegvr4+I6Y+0A9rD7HwtXI+7cJrMEVqyp:ijw2tXf9yfkMY+BES09JXAnyrZalI+YQ

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks